KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from…
A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. The…
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be…
A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection.…
A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the file include/database.php of the component Registration Form. Performing a manipulation of the argument branch results in…
A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been…
A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly…
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to…
A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made…
A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txn_id results in sql injection. The attack can be initiated remotely. The…
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. | A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from… |
Do wiadomości | 5,5 | 0,41 % | ||
| A flaw has been found in SourceCodester Online Exam System 1.0. | A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. The… |
Do wiadomości | 5,5 | 0,41 % | ||
| A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. | A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be… |
Do wiadomości | 5,5 | 0,41 % | ||
| A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. | A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection.… |
Do wiadomości | 5,5 | 0,41 % | ||
| A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the file include/database.php of the component Registration Form. Performing a manipulation of the argument branch results in… |
Do wiadomości | 5,5 | 0,41 % | ||
| A weakness has been identified in SourceCodester Performance Indicator System 1.0. | A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been… |
Do wiadomości | 5,5 | 0,41 % | ||
| A vulnerability was identified in SourceCodester Performance Indicator System 1.0. | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly… |
Do wiadomości | 5,5 | 0,41 % | ||
| A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to… |
Do wiadomości | 5,5 | 0,41 % | ||
| A vulnerability was found in SourceCodester Performance Indicator System 1.0. | A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made… |
Do wiadomości | 5,5 | 0,41 % | ||
| A vulnerability was found in Zen Cart up to 2.2.2. | A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txn_id results in sql injection. The attack can be initiated remotely. The… |
Do wiadomości | 5,5 | 0,41 % | ||
| Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
Do wiadomości | 5,5 | 0,41 % | ||
| Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. |
Do wiadomości | 5,5 | 0,41 % | ||
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose… | Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. | Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % | ||
| Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. | Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. |
Do wiadomości | 5,5 | 0,4 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.